The Federal Communications Commission in collaboration with the Federal Trade Commission today announced an inquiry into mobile device security, specifically, how phone makers review and release security updates.

 The FCC’s Wireless Telecommunications Bureau Chief Jon Wilkins sent a letter to several mobile carriers, including Verizon, AT&T and Sprint with questions related to this process, while the FTC has “ordered” eight device manufacturers to provide it with information on their procedure for issuing security updates to address security vulnerabilities in smartphones, tablets and other devices

The eight mobile manufacturers are Apple, Blackberry; Alphabet’s Google unit, HTC America Inc. LG Electronics USA Inc.; Microsoft Corp; Motorola Mobility LLC and Samsung Electronics America Inc [SMELA.UL].

“Consumers may be left unprotected, for long periods of time or even indefinitely, by any delays in patching vulnerabilities once they are discovered,” Jon Wilkins wrote in a letter to the companies.

This inquiry may be a reaction to a flaw in the Android smartphone operating system that was found last year called “Stagefright.”

According to the FCC, there have recently been a growing number of vulnerabilities associated with mobile operating systems that threaten the security and integrity of a user’s device, including “Stagefright” in the Android operating system, which may affect almost 1 billion Android devices globally.

Consumers may be left unprotected, for long periods of time or even indefinitely, by any delays in patching vulnerabilities once they are discovered, said the FCC.